In the security audit, it’s noted the crowd fund contract doesn’t specify a max, but it’s shown there are only 25,000,000 ROL tokens available…so I’m guessing the crowdfund ends once there are 25,000,000 tokens bought?

Yes when a total of 25,000,000 tokens are in circulation the crowdfund will have effectively closed. The cap is set at 25,000,000 tokens. Any unsold tokens that may remain after the crowdfund deadline will be destroyed to rule out any dilution.